CVE-2012-2416

EPSS 2.19%
Veröffentlicht 30.04.2012 20:55:02
Zuletzt bearbeitet 16.06.2026 23:41:31
Erkennungen
Login

chan_sip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.11.1 and 10.x before 10.3.1 and Asterisk Business Edition C.3.x before C.3.7.4, when the trustrpid option is enabled, allows remote authenticated users to cause a denial of service (daemon crash) by sending a SIP UPDATE message that triggers a connected-line update attempt without an associated channel.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 11

NVD 153 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Asterisk ≫ Open Source Version 1.6.2.0

Asterisk ≫ Open Source Version 1.6.2.0 Update rc2

Asterisk ≫ Open Source Version 1.6.2.0 Update rc3

Asterisk ≫ Open Source Version 1.6.2.0 Update rc4

Asterisk ≫ Open Source Version 1.6.2.0 Update rc5

Asterisk ≫ Open Source Version 1.6.2.0 Update rc6

Asterisk ≫ Open Source Version 1.6.2.0 Update rc7

Asterisk ≫ Open Source Version 1.6.2.0 Update rc8

Asterisk ≫ Open Source Version 1.6.2.1

Asterisk ≫ Open Source Version 1.6.2.1 Update rc1

Asterisk ≫ Open Source Version 1.6.2.2

Asterisk ≫ Open Source Version 1.6.2.3 Update rc2

Asterisk ≫ Open Source Version 1.6.2.4

Asterisk ≫ Open Source Version 1.6.2.5

Asterisk ≫ Open Source Version 1.6.2.6

Asterisk ≫ Open Source Version 1.6.2.6 Update rc1

Asterisk ≫ Open Source Version 1.6.2.6 Update rc2

Asterisk ≫ Open Source Version 1.6.2.7

Asterisk ≫ Open Source Version 1.6.2.7 Update rc1

Asterisk ≫ Open Source Version 1.6.2.7 Update rc2

Asterisk ≫ Open Source Version 1.6.2.7 Update rc3

Asterisk ≫ Open Source Version 1.6.2.8

Asterisk ≫ Open Source Version 1.6.2.8 Update rc1

Asterisk ≫ Open Source Version 1.6.2.9

Asterisk ≫ Open Source Version 1.6.2.9 Update rc1

Asterisk ≫ Open Source Version 1.6.2.9 Update rc2

Asterisk ≫ Open Source Version 1.6.2.9 Update rc3

Asterisk ≫ Open Source Version 1.6.2.10

Asterisk ≫ Open Source Version 1.6.2.10 Update rc1

Asterisk ≫ Open Source Version 1.6.2.10 Update rc2

Asterisk ≫ Open Source Version 1.6.2.11

Asterisk ≫ Open Source Version 1.6.2.11 Update rc1

Asterisk ≫ Open Source Version 1.6.2.11 Update rc2

Asterisk ≫ Open Source Version 1.6.2.12

Asterisk ≫ Open Source Version 1.6.2.12 Update rc1

Asterisk ≫ Open Source Version 1.6.2.13

Asterisk ≫ Open Source Version 1.6.2.14

Asterisk ≫ Open Source Version 1.6.2.14 Update rc1

Asterisk ≫ Open Source Version 1.6.2.15

Asterisk ≫ Open Source Version 1.6.2.15 Update rc1

Asterisk ≫ Open Source Version 1.6.2.15.1

Asterisk ≫ Open Source Version 1.6.2.16

Asterisk ≫ Open Source Version 1.6.2.16 Update rc1

Asterisk ≫ Open Source Version 1.6.2.16.1

Asterisk ≫ Open Source Version 1.6.2.16.2

Asterisk ≫ Open Source Version 1.6.2.17

Asterisk ≫ Open Source Version 1.6.2.17 Update rc1

Asterisk ≫ Open Source Version 1.6.2.17 Update rc2

Asterisk ≫ Open Source Version 1.6.2.17 Update rc3

Asterisk ≫ Open Source Version 1.6.2.17.1

Asterisk ≫ Open Source Version 1.6.2.17.2

Asterisk ≫ Open Source Version 1.6.2.17.3

Asterisk ≫ Open Source Version 1.6.2.18

Asterisk ≫ Open Source Version 1.6.2.18 Update rc1

Asterisk ≫ Open Source Version 1.6.2.18.1

Asterisk ≫ Open Source Version 1.6.2.18.2

Asterisk ≫ Open Source Version 1.6.2.19

Asterisk ≫ Open Source Version 1.6.2.19 Update rc1

Asterisk ≫ Open Source Version 1.6.2.20

Asterisk ≫ Open Source Version 1.6.2.21

Asterisk ≫ Open Source Version 1.6.2.22

Asterisk ≫ Open Source Version 1.6.2.23

Asterisk ≫ Open Source Version 1.8.0

Asterisk ≫ Open Source Version 1.8.0 Update beta1

Asterisk ≫ Open Source Version 1.8.0 Update beta2

Asterisk ≫ Open Source Version 1.8.0 Update beta3

Asterisk ≫ Open Source Version 1.8.0 Update beta4

Asterisk ≫ Open Source Version 1.8.0 Update beta5

Asterisk ≫ Open Source Version 1.8.0 Update rc2

Asterisk ≫ Open Source Version 1.8.0 Update rc3

Asterisk ≫ Open Source Version 1.8.0 Update rc4

Asterisk ≫ Open Source Version 1.8.0 Update rc5

Asterisk ≫ Open Source Version 1.8.1

Asterisk ≫ Open Source Version 1.8.1 Update rc1

Asterisk ≫ Open Source Version 1.8.1.1

Asterisk ≫ Open Source Version 1.8.1.2

Asterisk ≫ Open Source Version 1.8.2

Asterisk ≫ Open Source Version 1.8.2 Update rc1

Asterisk ≫ Open Source Version 1.8.2.1

Asterisk ≫ Open Source Version 1.8.2.2

Asterisk ≫ Open Source Version 1.8.2.3

Asterisk ≫ Open Source Version 1.8.2.4

Asterisk ≫ Open Source Version 1.8.3

Asterisk ≫ Open Source Version 1.8.3 Update rc1

Asterisk ≫ Open Source Version 1.8.3 Update rc2

Asterisk ≫ Open Source Version 1.8.3 Update rc3

Asterisk ≫ Open Source Version 1.8.3.1

Asterisk ≫ Open Source Version 1.8.3.2

Asterisk ≫ Open Source Version 1.8.3.3

Asterisk ≫ Open Source Version 1.8.4

Asterisk ≫ Open Source Version 1.8.4 Update rc1

Asterisk ≫ Open Source Version 1.8.4 Update rc2

Asterisk ≫ Open Source Version 1.8.4 Update rc3

Asterisk ≫ Open Source Version 1.8.4.1

Asterisk ≫ Open Source Version 1.8.4.2

Asterisk ≫ Open Source Version 1.8.4.3

Asterisk ≫ Open Source Version 1.8.4.4

Asterisk ≫ Open Source Version 1.8.5 Update rc1

Asterisk ≫ Open Source Version 1.8.5.0

Asterisk ≫ Open Source Version 1.8.6.0

Asterisk ≫ Open Source Version 1.8.6.0 Update rc1

Asterisk ≫ Open Source Version 1.8.6.0 Update rc2

Asterisk ≫ Open Source Version 1.8.6.0 Update rc3

Asterisk ≫ Open Source Version 1.8.7.0

Asterisk ≫ Open Source Version 1.8.7.0 Update rc1

Asterisk ≫ Open Source Version 1.8.7.0 Update rc2

Asterisk ≫ Open Source Version 1.8.7.1

Asterisk ≫ Open Source Version 1.8.7.2

Asterisk ≫ Open Source Version 1.8.8.0

Asterisk ≫ Open Source Version 1.8.8.0 Update rc1

Asterisk ≫ Open Source Version 1.8.8.0 Update rc2

Asterisk ≫ Open Source Version 1.8.8.0 Update rc3

Asterisk ≫ Open Source Version 1.8.8.0 Update rc4

Asterisk ≫ Open Source Version 1.8.8.0 Update rc5

Asterisk ≫ Open Source Version 1.8.8.1

Asterisk ≫ Open Source Version 1.8.8.2

Asterisk ≫ Open Source Version 1.8.9.0

Asterisk ≫ Open Source Version 1.8.9.0 Update rc1

Asterisk ≫ Open Source Version 1.8.9.0 Update rc2

Asterisk ≫ Open Source Version 1.8.9.0 Update rc3

Asterisk ≫ Open Source Version 1.8.9.1

Asterisk ≫ Open Source Version 1.8.9.2

Asterisk ≫ Open Source Version 1.8.9.3

Asterisk ≫ Open Source Version 1.8.10.0

Asterisk ≫ Open Source Version 1.8.10.0 Update rc1

Asterisk ≫ Open Source Version 1.8.10.0 Update rc2

Asterisk ≫ Open Source Version 1.8.10.0 Update rc3

Asterisk ≫ Open Source Version 1.8.10.0 Update rc4

Asterisk ≫ Open Source Version 1.8.10.1

Asterisk ≫ Open Source Version 1.8.11.0 Update rc2

Asterisk ≫ Open Source Version 1.8.11.0 Update rc3

Asterisk ≫ Open Source Version 10.0.0

Asterisk ≫ Open Source Version 10.0.0 Update beta1

Asterisk ≫ Open Source Version 10.0.0 Update beta2

Asterisk ≫ Open Source Version 10.0.0 Update rc1

Asterisk ≫ Open Source Version 10.0.0 Update rc2

Asterisk ≫ Open Source Version 10.0.0 Update rc3

Asterisk ≫ Open Source Version 10.0.1

Asterisk ≫ Open Source Version 10.1.0

Asterisk ≫ Open Source Version 10.1.0 Update rc1

Asterisk ≫ Open Source Version 10.1.0 Update rc2

Asterisk ≫ Open Source Version 10.1.1

Asterisk ≫ Open Source Version 10.1.2

Asterisk ≫ Open Source Version 10.1.3

Asterisk ≫ Open Source Version 10.2.0

Asterisk ≫ Open Source Version 10.2.0 Update rc1

Asterisk ≫ Open Source Version 10.2.0 Update rc2

Asterisk ≫ Open Source Version 10.2.0 Update rc3

Asterisk ≫ Open Source Version 10.2.0 Update rc4

Asterisk ≫ Open Source Version 10.2.1

Asterisk ≫ Open Source Version 10.3.0

Asterisk ≫ Open Source Version 10.3.0 Update rc2

Asterisk ≫ Open Source Version 10.3.0 Update rc3

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	2.19%	0.801

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	6.5	8	6.4	AV:N/AC:L/Au:S/C:P/I:P/A:P

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079759.html

http://secunia.com/advisories/48891

http://downloads.asterisk.org/pub/security/AST-2012-006.html

Patch

Vendor Advisory

http://osvdb.org/81456

http://www.securityfocus.com/bid/53205

http://www.securitytracker.com/id?1026963

https://exchange.xforce.ibmcloud.com/vulnerabilities/75101

https://issues.asterisk.org/jira/browse/ASTERISK-19770

https://nvd.nist.gov/vuln/detail/CVE-2012-2416

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-2416

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-2416

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2012-2416